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IN THE CLAIMS 

Claim 1 Ccuirenily amended): A real-time virus tracking and display system for use with a 
distributed computer network, the system comprising: 

a plurality of client users having potentially infected client computers; 

at least one anti-virus scanning server accessible via the distributed computer network, 
whereby the client users contact the server to facilitate virus scanning of the client computers; 

a scan log of informatio a which is sent back from each client user detailing certain results 
of the virus scanning on each client computer; 

a virus-tracking server for receiving the scan log information from said client comp uters 
in real-time; 

a database server associated with the virus-tracking server for processing the scan log 
information into virus-tracking information; and 

at least one virus tracking display mode accessible by a tracking user from the virus 
tracking server, the display mode providing real-time updates of said virus tracking information 
pertaining to the scan logs. 



Claim 2 (previously presented); The system according to Claim 1 . wherein the tracking user 
configure the display modes to show the virus-tracking information in association with user- 
selected geographic maps of where the viruses are occurring. 



Claim 3 (previously presented): The system according to Claim 2, wherein the display modes 
includes a plurality of web pages v/iih user selectable menus to configure the virus-tracking 
display mode on the pages. 
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Claim 4 (previously presented): The system according to Claim 1, wherein the scan log 
information contains no infoiraation relating to the direct identification of the client user. 



Claim 5 (previously presented): The system according to Claim 4, wherein the scan log 
information includes the name of the virus, the frequency of iis occurrence, and the geographic 
location of the infected computer. 



Claim 6 (previously presented): The system according to Claim 1, wherein a servlet program on 
die vinas-tracking server is used to receive the scan log information from the at least one anti- 
virus scanning server. 



Claim 7 (previously presented): The system according to Claim 1 . wherein a polling program is 
used to regularly retrieve the virus tracking infomiation from the database server and store it in a 
data object. 



Claim 8 (previously presented): The system of Claim 7, wherein a common gateway interface 
(CGI) program is used to retrieve the data object for display by the tracking user. 



Claim 9 (previously presented): The system of Claim 1. wherein a Java applet running on a 
tracking user browser is used to display a real-time virus trace map. 



Claim 1 0 (previously presented): Tlie system of Claim 1 . wherein the client user is also the 
tracking user. 
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Claim 1 1 (cuirenily amended): The system of Claim U wherein the distributed computer 
network of includes the Internet, wherein said sca n log from each scanned client comp uter 
back over the Internet to be received by said vims tracking server, and wherein said virus 
tracking display mode i s accessible over the Internet bv said trackinp nsar . 



Claim 12 (currently amended): A method to provide real-time virus tracking and display for uj 
with a distributed computer network, the method comprising: 

providing an anti-virus scanning program on at least one anti-virus scanning server 
accessible via the distributed computer network; 

invoking the anti-virus scanning program from a plurality of client users having 
potentially infected client computers; 

generating a scan log from each scanned client computer and sending the scan log back 
from each client user, the scan log detailing certain results of the scanning program on each 
client computer; 

receiving the scan log information from said cl ient cQmputer<i in real-time via a virus 
tracking server associated with the distributed computer network; 

processing the scan log information into virus tracking information and storing it on a 
database server associated with the virus-tracking server; and 

retrieving the virus tracking information and displaying a real-time trace on a tracking 
user device. 



Claim 13 (previously presented): The method according to Claim 12, which further includes 
configuring display modes by the tracking user to show the virus-tracking information in 
association with user-selected geographic maps of where the viruses are occurring. 
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Claim 14 (previously presented): The method according to Claim 13, which further includes 
displaying the display modes via a plurality of web pages with user selectable menus to 
configure the virus-tracking infonuation on the pages. 

Claim 15 (Original): The method according to Claim 12. wherein the scan log contains no 
information relating ro the direct identification of the client user. 

Claim 16 (Original): The method according to Claim 15, wherein the scan log includes the name 
of the vims, the frequency of its occurrence* and the geographic location of the infected 
computer. 

Claim 17 (previously presented): The method according to Claim 12, which further includes 
providing a scrvlet program on the virus-tracking server to receive the scan log from the at least 
one anti-virus scanning server. 

Claim 18 (previously presented); The method according to Claim 12, which further includes 
providing a polling program to regularly retrieve virus tracking information firom the database 
server and store it in a data object- 
Claim 19 (Original): The method of Claim IS, which further incltodes providing a common 
gateway interface (CGI) program to retrieve the data object for display by the tracking user. 

Claim 20 (previously presented); The method of Claim 12, which further includes running a 
Java applet on the browser of the tracking user device to display a real-time virus trace map. 
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Claim 21 (previously presented): The method of Claim 12. wherein the client user is also the 
tracking user. 



CJaim 22 (currently amended): The method of Claim 12, wherein the distributed computer 
network el" includes the Interne t, wherein said scan log from each scanned client computer is sent 
back over the Internet to be recei ved bv said virus tracking server, and wherein said real-time 
trace disp layed on said tracking user device is made available over the Internet . 
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